IP Library Granted Patent US 11,847,143
Granted Patent B2
US 11,847,143 · App. 17/220,949 · Granted Dec 19, 2023

Systems and methods for automated data governance

Inventors: Aniket Sinkar (Glen Allen, VA); Manisha Purkar (Glen Allen, VA); Sindhu Myla (Glen Allen, VA); Sovon Nath (Glen Allen, VA); Richard Shi (Henrico, VA); Bindiya Goppenahalli Mahadeva (Glen Allen, VA); Cameron Utsman (Richmond, VA); Ajay Shinde (Henrico, VA); Mark Mabry (Glen Allen, VA); Daniel Hanson (Richmond, VA); Arindam Chakraborty (Glen Allen, VA)
Assignee: CAPITAL ONE SERVICES, LLC
G06F16/285G06F16/245
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,847,143
App. No.
17/220,949
Granted
Dec 19, 2023
Kind
B2
Abstract

Systems and methods for providing automated data governance are disclosed. The system may include a plurality of data environments, a metadata repository storing data attributes and classification requirements, a policy repository, one or more processors, and a memory in communication with the one or more processors storing instructions to execute steps of a method. The system may receive a first dataset from a first data environment having a first dataset ID. The system may transmit the dataset ID to the metadata repository and the metadata repository may return an indication that the first dataset includes at least one data attribute and at least one associated classification requirement. The system may transmit the classification requirement to the policy repository and receive classification code associated with the classification requirement. The system may modify the first dataset by transmitting instructions to the first data environment to execute the classification code.

Claims (97)

1. A system comprising:

a plurality of data environments;

a metadata repository storing a plurality of data attributes and a plurality of classification requirements;

a policy repository;

a compliance management database;

one or more processors; and

memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:

receive a first dataset from a first data environment, the first dataset comprising a first dataset ID and a plurality of data entries;

transmit the first dataset ID to the metadata repository;

receive an indication from the metadata repository that the first dataset contains at least one data attribute and at least one first associated classification requirement;

transmit the at least one first associated classification requirement to the policy repository;

receive a first classification code associated with the at least one first associated classification requirement from the policy repository, the first classification code comprising a standardized code argument for data masking or data tokenization,

wherein the first classification code is determined based on the at least one data attribute, a level of security associated with the first data environment, and whether the first data environment is a client facing environment; and

responsive to receiving the first classification code:

query the compliance management database for whether each data entry of the plurality of data entries requires modifying based on the first classification code to conform to the first associated classification requirement; and

responsive to identifying that at least a first data entry of the plurality of data entries does not conform to the first associated classification requirement based on the querying, modify contents of the first dataset by transmitting instructions to the first data environment to execute the first classification code.

2. The system of claim 1 , wherein the instructions are configured to cause the system to:

monitor the metadata repository for an indication that the first dataset will be copied to a second data environment;

receive a second classification requirement for at least one data attribute specific to the second data environment;

transmit the second classification requirement to the policy repository;

receive a second classification code associated with the second classification requirement from the policy repository; and

proactively transmit instructions to a second data environment to execute the second classification code.

3. The system of claim 1 , wherein the instructions are configured to cause the system to:

receive an indication from the metadata repository that the first dataset has been copied to a second data environment;

receive a second classification requirement for at least one data attribute specific to the second data environment;

transmit the second classification requirement to the policy repository;

receive a second classification code associated with the second classification requirement from the policy repository; and

transmit instructions to the second data environment to execute the second classification code.

4. The system of claim 1 ,

wherein modifying the first dataset is based on receiving an indication that the first classification code has been verified from the compliance management database.

5. The system of claim 1 , wherein each classification requirement of the plurality of classification requirements is specific to a respective data environment of the plurality of data environments.

6. The system of claim 1 , wherein the instructions are configured to cause the system to:

monitor each of the plurality of data environments for a second dataset;

identify a second dataset associated with a third data environment having a second dataset ID;

transmit the second dataset ID to the metadata repository;

receive an indication from the metadata repository that the second dataset contains at least one data attribute and at least one second associated classification requirement;

transmit the at least one second associated classification requirement to the policy repository;

receive a second classification code associated with the at least one second associated classification requirement from the policy repository; and

modify the second dataset by transmitting instructions to the third data environment to execute the second classification code.

7. A system comprising:

a plurality of data environments;

a metadata repository storing a plurality of data attributes and a plurality of classification requirements;

a policy repository;

a compliance management database;

one or more processors; and

memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:

receive an indication from the metadata repository that a first data attribute has been updated to include a first classification requirement;

query the metadata repository for a dataset ID associated with a dataset including the first data attribute and a plurality of data entries;

determine that a first dataset having the dataset ID is stored on a first data environment of the plurality of data environments;

transmit the first classification requirement to the policy repository;

receive a first classification code associated with the first classification requirement, the first classification code comprising a standardized code argument for data masking or data tokenization,

wherein the first classification code is determined based on the first data attribute, a level of security associated with the first data environment, and whether the first data environment is a client facing environment;

query the compliance management database for whether each data entry of the plurality of data entries requires modifying based on the first classification code to conform to the first classification requirement; and

responsive to identifying that at least a first data entry of the plurality of data entries does not conform to the first classification requirement based on the querying, modify contents of the first dataset by transmitting instructions to the first data environment to execute the first classification code.

8. The system of claim 7 , wherein the instructions are configured to cause the system to:

monitor the metadata repository for an indication that the first dataset will be copied to a second data environment;

receive a second classification requirement for at least one data attribute specific to the second data environment;

transmit the second classification requirement to the policy repository;

receive a second classification code associated with the second classification requirement from the policy repository; and

proactively transmit instructions to a second data environment to execute the second classification code.

9. The system of claim 7 , wherein the instructions are configured to cause the system to:

receive an indication from the metadata repository that the first dataset has been copied to a second data environment;

receive a second classification requirement for at least one data attribute specific to the second data environment;

transmit the second classification requirement to the policy repository;

receive a second classification code associated with the second classification requirement from the policy repository; and

modify the first dataset by transmitting instructions to the second data environment to execute the second classification code.

10. The system of claim 7 ,

wherein modifying the first dataset is based on receiving an indication that the first classification code has been verified from the compliance management database.

11. The system of claim 7 , wherein each classification requirement of the plurality of classification requirements is specific to a respective data environment of the plurality of data environments.

12. The system of claim 7 , wherein the instructions are configured to cause the system to:

monitor each of the plurality of data environments for a second dataset; and

identify a second dataset associated with a third data environment having a second dataset ID;

transmit the second dataset ID to the metadata repository;

receive an indication from the metadata repository that the second dataset contains at least one data attribute and at least one second associated classification requirement;

transmit the at least one second associated classification requirement to the policy repository;

receive a second classification code associated with the at least one second associated classification requirement from the policy repository; and

modify the second dataset by transmitting instructions to the third data environment to execute the second classification code.

13. The system of claim 7 , wherein each classification requirement further comprises at least one of a tokenization requirement and an anonymization requirement.

14. A system comprising:

a plurality of data environments;

a metadata repository storing a plurality of data attributes and a plurality of classification requirements;

a policy repository;

a compliance management database;

one or more processors; and

memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:

receive a request to publish a first dataset having a first dataset ID and a plurality of data entries to a first data environment;

query the metadata repository to identify at least one data attribute and an associated classification requirement for the first dataset based on the first dataset ID;

query the policy repository for a first classification code associated with the associated classification requirement, the first classification code comprising a standardized code argument for data masking or data tokenization,

wherein the first classification code is determined based on the at least one data attribute and on whether the first data environment is a client facing environment;

query the compliance management database for whether each data entry of the plurality of data entries requires modifying based on the first classification code to conform to the associated classification requirement; and

responsive to identifying that at least a first data entry of the plurality of data entries does not conform to the associated classification requirement based on the querying, modify contents of the first dataset by transmitting instructions to the first data environment to execute the first classification code.

15. The system of claim 14 , wherein each classification requirement further comprises at least one of a tokenization requirement and an anonymization requirement.

16. The system of claim 14 , wherein the first classification code further comprises a plurality of interchangeable standardized code arguments.

17. The system of claim 14 , wherein each classification requirement of the plurality of classification requirements is specific to a respective data environment of the plurality of data environments.

18. The system of claim 1 , wherein the instructions are further configured to cause the system to:

responsive to receiving the first classification code, retrieve one or more permissions associated with the first dataset, the one or more permissions indicative of permission to modify the first dataset,

wherein modifying the contents of the first dataset is based on the one or more permissions.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 2, 2021
From: SINKAR, ANIKET; PURKAR, MANISHA; MYLA, SINDHU; NATH, SAVON; SHI, RICHARD; MAHADEVA, BINDIYA GOPPENAHALLI; ULTSMAN, CAMERON; SHINDE, AJAY; MABRY, MARK; HANSON, DANIEL; CHAKRABORTY, ARINDAM
To: CAPITAL ONE SERVICES, LLC
Reel/Frame 055804/0078 →
Continuity (1)
Related Publication 20220318273A1 · Oct 6, 2022